Automation / Cloud Services Engineer

Lumbee Tribe Holdings, Inc.; California (MO); On-site; USD 120,000 - 160,000; Full time

Job summary

Lumbee Tribe Holdings, Inc. seeks an Automation / Cloud Services Engineer to design, deploy, and maintain secure private, hybrid, and multi-cloud infrastructure hosting C5I applications for DoW/DoD environments.

You will install and administer VCF, NSX, and cloud-native platforms across on-prem and approved public clouds, using IaC and CI/CD pipelines. Strong security and compliance skills are essential for this role.

Qualifications

• Five years hands-on experience designing, deploying, and maintaining enterprise virtualization and cloud infra.
• Experience installing and administering VMware Cloud Foundation and NSX.
• Experience architecting multi-cloud with AWS/Azure/GCP and on-prem environments.
• Proficiency in IaC using Ansible and Terraform for automation.
• Strong documentation and security compliance skills (STIG/RMF).

Responsibilities

• Design, deploy, and maintain secure private, hybrid, and multi-cloud infra.
• Install, configure, patch, and administer VCF components and NSX micro-segmentation.
• Architect and operate hybrid-cloud and container platforms (Kubernetes/OpenShift/Tanzu).
• Build and maintain IaC/CI/CD pipelines (Ansible, Terraform) and Git/GitLab workflows.
• Provide ongoing monitoring, governance, cost optimization, and documentation.

Skills

Private cloud design

Hybrid multi-cloud

Container orchestration

VCF administration

IaC (Ansible, Terraform)

CI/CD pipelines

Git/GitLab

DISA STIG/RMF knowledge

Python/PowerShell/Bash

Zero Trust/NIST 800-207

Education

DoD 8140-certified onboarding

VCP-VCF Admin

AWS Solutions Architect Associate

Microsoft Azure Administrator Associate

Tools

VMware vSphere

VMware vSAN

NSX

Aria Suite

Kubernetes

OpenShift

Tanzu

Ansible

Terraform

Git/GitLab

AWS

Azure

GCP

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Position Title

Position Classification

Exempt

Position Type

This is a full-time position scheduled to work standard business hours from 8:00 a.m. to 5:00 p.m. Occasional work outside standard hours may be required to support scheduled maintenance windows, deployments, test events, or critical incident response.

Work Location

Marine Corps Tactical Systems Support Activity (MCTSSA), 31 Area, Marine Corps Base Camp Pendleton, CA

Position Description

The Automation / Cloud Services Engineer supports the Marine Corps Tactical Systems Support Activity (MCTSSA) Infrastructure and Information Services Division (I2SD) by designing, deploying, and maintaining secure private, hybrid, and multi-cloud infrastructure that hosts critical Command, Control, Communications, Computers, Cyber, and Intelligence (C5I) applications for engineering, test, and experimentation. The individual is responsible for installing, configuring, patching, and administering the VMware Cloud Foundation (VCF) private cloud (vSphere, vSAN, NSX, and Aria Suite) in a Department of War (DoW) IL5-compliant environment, enforcing NSX micro-segmentation to realize Zero Trust objectives, and maintaining continuous compliance with DISA STIGs.

The engineer architects and implements resilient hybrid-cloud and container-orchestration frameworks (such as Kubernetes, Tanzu, and OpenShift) spanning on-premises private clouds and DoW-approved public clouds (AWS, Azure, and GCP), and provisions multi-tenant virtual machines, containerized workloads, and serverless architectures across development, test, and production enclaves in accordance with DoW Secure Cloud Computing guidelines. The individual builds and maintains an Infrastructure-as-Code (IaC) and configuration management framework using Ansible, Terraform, and CI/CD pipelines to automate provisioning, configuration compliance, and application deployment, committing all source code daily to the Government Git/GitLab repository.

The engineer provides continuous monitoring, governance, and cost optimization of hybrid-cloud infrastructure to sustain greater than 99.9% availability, and produces version-controlled documentation, blueprints, and README files that allow the Government to rebuild any environment from bare metal to operational status. The role also supports assigned test events, contributes to System Security Plans (SSPs) and related cybersecurity documentation, and provides technical representation at working groups and meetings as required.

Essential Position Functions

• Five years of hands-on experience designing, deploying, and administering enterprise virtualization and cloud infrastructure, preferably within DoD/DoW environments.
• Hands-on experience installing, configuring, patching, and administering VMware Cloud Foundation (VCF) components, including vSphere, vSAN, NSX, and Aria Suite, and implementing NSX micro-segmentation policies.
• Experience architecting, deploying, and securing container-orchestration platforms such as Kubernetes, VMware Tanzu, or Red Hat OpenShift, including hardening containers to the DoW Container Hardening Guide.
• Experience designing and operating secure, multi-tenant hybrid and multi-cloud architectures in at least one DoW-approved public cloud (AWS, Azure, or GCP), including cloud-native and on-premises service meshes for secure service-to-service communication.
• Proficiency developing, testing, and maintaining declarative automation code (Ansible playbooks, Terraform configurations) for network devices (Arista and Cisco switches), virtual hosts, and operating systems.
• Experience building and maintaining CI/CD pipelines and source control workflows using Git/GitLab to automate testing and deployment.
• Administrator-level knowledge of Windows Server, Red Hat Enterprise Linux, and VMware ESXi, including patching, DISA STIG hardening, and integration with enterprise storage, backup systems, and Active Directory/LDAP services.
• Working knowledge of Zero Trust Architecture principles (NIST SP 800-207) and DoW IL5/IL6 cloud security requirements.
• Experience using cloud monitoring suites to track resource utilization, scale instances to handle traffic spikes, cost-optimize resources, and maintain high availability (greater than 99.9%).
• Proficiency in scripting languages such as Python, PowerShell, and Bash to automate repetitive tasks.
• Familiarity with the Risk Management Framework (RMF) and developing System Security Plans (SSPs) and related cybersecurity documentation.
• Strong written and verbal communication skills, including the ability to produce clear, version-controlled technical documentation, system blueprints, and operational guides, and to explain complex technical topics to non-technical audiences.
• Possess a DoD 8140-compliant certification appropriate for privileged system access (e.g., CompTIA Security+ CE or higher) upon onboarding.
• Possess one of the following certifications upon onboarding:
  • VMware Certified Professional – VMware Cloud Foundation Administrator (VCP-VCF Admin)
  • AWS Certified Solutions Architect – Associate
  • Microsoft Certified: Azure Administrator Associate
  • Certified Kubernetes Administrator (CKA)
  • Red Hat Certified Engineer (RHCE)
• Obtain one of the following certifications within 9 months of onboarding:
  • HashiCorp Certified: Terraform Associate
  • Certified Kubernetes Security Specialist (CKS)
  • AWS Certified Solutions Architect – Professional
  • Microsoft Certified: Azure Solutions Architect Expert

Competencies for the role

The Automation / Cloud Services Engineer demonstrates advanced expertise in private, hybrid, and multi-cloud architecture, virtualization, and container orchestration within secure DoW environments. This role requires an automation-first mindset, with the ability to translate manual processes into repeatable Infrastructure-as-Code and CI/CD workflows that reduce provisioning time and eliminate configuration drift. The individual applies Zero Trust and DISA STIG requirements to every layer of the environment, troubleshoots complex issues methodically, and documents work so thoroughly that the Government can reconstruct any environment independently.

Physical Requirements for the role

This position is primarily sedentary and requires the ability